5f6e22f87de6521a07eedc7c13a360f0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5f6e22f87de6521a07eedc7c13a360f0_NeikiAnalytics.exe
Size

134KB
MD5

5f6e22f87de6521a07eedc7c13a360f0
SHA1

9225e9572b564e51bfd021de88b8a43a96ea457f
SHA256

7352fbdceefa15e6b88f12cde997505762e1c6eab3e060f4d636d7f3b77f8ac6
SHA512

9c2e704caa894478a051b369020e08bcfc1fbf918b28d0efb1ad2cc9850f03ad4b70cd3b6b6b8064b6fbb7dc5912472e9740a73b9d27c8360ecfdc1e0c8c88c2
SSDEEP

3072:5P53UalVcsMnu6I2Ff5rZpNFIEL6h7YcCla:5P5UKcTu6IOxL3IEL6GR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f6e22f87de6521a07eedc7c13a360f0_NeikiAnalytics.exe

Files

5f6e22f87de6521a07eedc7c13a360f0_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

f60bddf9bf5164c914498ed10fc3bc14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documets\Build\Build23.pdb

Imports

advapi32

OpenServiceW

comctl32

PropertySheetA

kernel32

GetModuleHandleW
GetModuleFileNameW
LoadLibraryW

Exports

Exports

SetCertificate
GetCertificate
?RonFon12@@YGPAEPAXJ@Z
?RonFon13@@YGPAEPAXJ@Z
?RonFon14@@YGPAEPAXJ@Z
?RonFon1@@YGPAEPAXJ@Z
?RonFon2@@YGPAEPAXJ@Z
?RonFon3@@YGPAEPAXJ@Z
?RonFon4@@YGPAEPAXJ@Z
?RonFon5@@YGPAEPAXJ@Z
?RonFon6@@YGPAEPAXJ@Z
?RonFon7@@YGPAEPAXJ@Z
?RonFon8@@YGPAEPAXJ@Z
?RonFon9@@YGPAEPAXJ@Z

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.auput
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.euput
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.esput
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ouput
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pdtxsue
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f60bddf9bf5164c914498ed10fc3bc14

Headers

File Characteristics

PDB Paths

Imports

advapi32

comctl32

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 25KB

.auput Size: 512B - Virtual size: 76B

.euput Size: 512B - Virtual size: 64B

.esput Size: 512B - Virtual size: 64B

.ouput Size: 512B - Virtual size: 64B

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 101KB - Virtual size: 243KB

.reloc Size: 2KB - Virtual size: 30KB

pdtxsue Size: - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 25KB

.auput
Size: 512B - Virtual size: 76B

.euput
Size: 512B - Virtual size: 64B

.esput
Size: 512B - Virtual size: 64B

.ouput
Size: 512B - Virtual size: 64B

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 101KB - Virtual size: 243KB

.reloc
Size: 2KB - Virtual size: 30KB

pdtxsue
Size: - Virtual size: 4KB